Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: 3wZpJu3lqeK4rWWsz+wOxo0iP2Ugx87EmKyVQwUwlxc=
Subject key identifier: 43:BF:8D:1F:12:24:56:AB:6C:76:C4:9B:74:82:35:C0:F0:C3:B0:2A
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019352076C6B65EEBFFB7A5FD27E28CA007F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0B25
Signing time: Fri 22 Nov 2024 04:00:38 +0000
Manifest this update: Fri 22 Nov 2024 04:00:38 +0000
Manifest next update: Sat 23 Nov 2024 04:00:38 +0000
Files and hashes: 1: 4xR4eGEXe-tI0qLdkog-e1ZMAHc.roa (hash: g1YXwBwJnGFm9ATlUeYg5d350ihtXbCuma0eNf4KT40=)
2: ZZ10ISeIwRdYR32w0JBS7fcMBzU.roa (hash: apy0L4asx1l1amGe/5syMTiFOiyLktyBT3BMPb2srcE=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: JS/LIOEPlT+v6uTC/EiQzSZGNO1x1q3mAzZRvI2/h8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:6c:6b:65:ee:bf:fb:7a:5f:d2:7e:28:ca:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Nov 22 04:00:38 2024 GMT
Not After : Nov 23 04:00:38 2024 GMT
Subject: CN=43bf8d1f122456ab6c76c49b748235c0f0c3b02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:b4:66:0d:fc:95:e2:fa:04:bb:4c:f6:5a:
36:c7:8d:23:d5:5b:c3:60:89:32:84:bf:02:4a:8e:
a0:85:22:8d:7c:93:b9:37:88:73:3f:8e:ca:65:bb:
a1:70:4d:ca:ed:b2:22:1f:ba:9e:2e:98:93:9c:ab:
d7:67:a3:db:e9:2c:85:0f:25:70:cb:db:2b:1a:20:
87:1c:b2:fd:14:74:e2:f7:8f:ea:82:ff:b1:93:b4:
ff:51:02:14:59:c1:cf:a2:45:86:8f:2b:a9:fd:46:
a5:2d:b7:c7:ed:a6:15:29:1e:48:3b:54:b6:cb:51:
d9:f5:1e:18:f8:f2:06:f5:59:9e:84:c1:e1:92:46:
7d:a0:b9:ac:44:87:03:c0:52:be:ba:70:99:23:a5:
6a:8f:ff:47:e0:1c:90:89:ef:f8:fb:ee:ce:4f:82:
2c:e6:ca:3d:e2:97:3b:50:09:58:7e:17:a1:c5:94:
fa:a9:7c:fe:fd:c9:14:83:ee:9c:b0:59:4e:b5:39:
e0:93:0b:89:d5:ad:cc:77:8c:ae:82:cc:62:33:1e:
62:8b:64:dd:dd:63:54:2e:dc:38:bb:2f:c2:0b:d8:
eb:00:63:6a:f1:e2:a5:bf:bc:68:7f:94:fe:0c:2c:
3f:f6:d4:89:6d:6c:07:d2:75:d1:e1:15:d5:69:4d:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:8D:1F:12:24:56:AB:6C:76:C4:9B:74:82:35:C0:F0:C3:B0:2A
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e2:cf:1e:b3:b3:34:c4:c1:83:64:00:5b:0a:73:e1:19:29:
73:53:ae:cc:eb:d4:dd:28:7e:d2:a5:76:29:da:7a:40:e9:ae:
e4:31:1a:59:6b:d9:da:86:b3:68:43:c7:81:69:c5:bb:b3:c7:
b5:4a:11:42:dc:ca:90:48:5e:ad:25:d5:18:c8:80:a5:d4:ae:
69:4e:1f:57:1c:d4:8e:3e:1b:df:e8:dd:79:09:8f:76:77:f3:
ca:a3:fe:f8:5f:31:4e:42:13:63:f5:1a:1b:00:b9:73:5e:84:
7e:f7:7c:a9:99:99:4c:7f:90:2f:18:f3:49:38:56:e2:d3:0a:
cb:85:e9:93:d9:40:95:6a:09:3f:22:49:96:03:28:04:06:e9:
a9:71:a7:b8:51:e1:82:c3:4c:32:54:ff:8b:c2:77:cc:f7:97:
8e:79:63:cd:d9:11:eb:62:83:81:fc:a8:06:33:c6:cc:47:54:
d0:a1:be:bb:9e:94:30:7c:21:fd:6a:14:17:be:85:c2:e7:9b:
0f:6a:67:0b:01:9a:93:44:4c:4e:7f:77:ed:ac:70:40:e4:e9:
14:01:14:de:90:d7:2c:61:2b:2b:25:15:df:ec:a0:d3:ca:18:
ba:d0:ef:a5:82:29:19:fb:be:8a:44:c8:ff:2b:1b:42:46:2e:
f5:0b:9f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB2xrZe6/+3pf0n4oygB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0
NTkzMWMwHhcNMjQxMTIyMDQwMDM4WhcNMjQxMTIzMDQwMDM4WjAzMTEwLwYDVQQD
Eyg0M2JmOGQxZjEyMjQ1NmFiNmM3NmM0OWI3NDgyMzVjMGYwYzNiMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3y0Zg38leL6BLtM9lo2x40j1VvD
YIkyhL8CSo6ghSKNfJO5N4hzP47KZbuhcE3K7bIiH7qeLpiTnKvXZ6Pb6SyFDyVw
y9srGiCHHLL9FHTi94/qgv+xk7T/UQIUWcHPokWGjyup/UalLbfH7aYVKR5IO1S2
y1HZ9R4Y+PIG9VmehMHhkkZ9oLmsRIcDwFK+unCZI6Vqj/9H4ByQie/4++7OT4Is
5so94pc7UAlYfhehxZT6qXz+/ckUg+6csFlOtTngkwuJ1a3Md4yugsxiMx5ii2Td
3WNULtw4uy/CC9jrAGNq8eKlv7xof5T+DCw/9tSJbWwH0nXR4RXVaU0gwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO/jR8SJFarbHbEm3SCNcDww7AqMB8GA1UdIwQY
MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt
ZTQ1ODYzZWFjMmI0LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0
LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+LPHrOz
NMTBg2QAWwpz4Rkpc1OuzOvU3Sh+0qV2Kdp6QOmu5DEaWWvZ2oazaEPHgWnFu7PH
tUoRQtzKkEherSXVGMiApdSuaU4fVxzUjj4b3+jdeQmPdnfzyqP++F8xTkITY/Ua
GwC5c16Efvd8qZmZTH+QLxjzSThW4tMKy4Xpk9lAlWoJPyJJlgMoBAbpqXGnuFHh
gsNMMlT/i8J3zPeXjnljzdkR62KDgfyoBjPGzEdU0KG+u56UMHwh/WoUF76Fwueb
D2pnCwGak0RMTn937axwQOTpFAEU3pDXLGErKyUV3+yg08oYutDvpYIpGfu+ikTI
/ysbQkYu9QufDw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:01:09 2024 by rpki-client on console-fra.rpki-client.org